Browse All CVEs
10,519 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-64275 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - pre | |
CVE-2026-64306 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix re | |
CVE-2026-64307 |
medium | 5.5 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not | |
CVE-2026-64308 |
medium | 5.5 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not | |
CVE-2026-64309 |
medium | 5.5 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not | |
CVE-2026-64310 |
medium | 5.5 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not | |
CVE-2026-64314 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1 | |
CVE-2026-64316 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use pr | |
CVE-2026-57978 |
medium | 5.4 | 0.0021 | 2026-10-29 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-17500 |
medium | 6.9 | 0.0072 | 2026-10-29 | A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the funct | |
CVE-2026-17501 |
medium | 6.9 | 0.0072 | 2026-10-29 | A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the functi | |
CVE-2026-16554 |
medium | 5.1 | 0.0037 | 2026-10-29 | cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in c | |
CVE-2026-65764 |
medium | 5.1 | 0.0044 | 2026-10-29 | Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - | |
CVE-2026-65765 |
medium | 6.9 | 0.0047 | 2026-10-29 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 | |
CVE-2026-17534 |
medium | 5.5 | 0.0016 | 2026-10-29 | Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a s | |
CVE-2026-12495 |
medium | 5.3 | 0.0025 | 2026-10-29 | Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decr | |
CVE-2026-14856 |
medium | 6.3 | 0.0039 | 2026-10-29 | A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the | |
CVE-2026-45112 |
medium | 6.9 | 0.0103 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java b | |
CVE-2026-55970 |
medium | 6.9 | 0.0077 | 2026-10-29 | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache T | |
CVE-2026-57916 |
medium | 4.6 | 0.0011 | 2026-10-29 | proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validati | |
CVE-2026-57917 |
medium | 4.8 | 0.0018 | 2026-10-29 | proCertum SmartSign parses external XML entities from arbitrary crafted signature files, e | |
CVE-2026-58023 |
medium | 6.9 | 0.0102 | 2026-10-29 | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apa | |
CVE-2026-66053 |
medium | 5.9 | 0.0029 | 2026-10-29 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Pytho | |
CVE-2026-59557 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions. | |
CVE-2026-59559 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor &a | |
CVE-2026-59560 |
medium | 6.5 | 0.0037 | 2026-10-29 | Subscriber Broken Access Control in FundEngine <= 1.7.8 versions. | |
CVE-2026-65433 |
medium | 6.5 | 0.0030 | 2026-10-29 | Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & G | |
CVE-2026-65434 |
medium | 6.5 | 0.0037 | 2026-10-29 | Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. | |
CVE-2026-65435 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions. | |
CVE-2026-65562 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. | |
CVE-2026-65563 |
medium | 5.9 | 0.0024 | 2026-10-29 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions. | |
CVE-2026-65564 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. | |
CVE-2026-65567 |
medium | 5.3 | 0.0029 | 2026-10-29 | Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions. | |
CVE-2026-65568 |
medium | 5.0 | 0.0028 | 2026-10-29 | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. | |
CVE-2026-66428 |
medium | 4.3 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versi | |
CVE-2026-66433 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. | |
CVE-2026-66434 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug | |
CVE-2026-66437 |
medium | 4.9 | 0.0019 | 2026-10-29 | Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions. | |
CVE-2026-66438 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. | |
CVE-2026-66442 |
medium | 5.4 | 0.0029 | 2026-10-29 | Subscriber Broken Access Control in YayPricing <= 3.5.6 versions. | |
CVE-2026-66445 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. | |
CVE-2026-66448 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. | |
CVE-2026-66474 |
medium | 4.3 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT | |
CVE-2026-66475 |
medium | 5.9 | 0.0024 | 2026-10-29 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – C | |
CVE-2026-66476 |
medium | 4.9 | 0.0050 | 2026-10-29 | Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions. | |
CVE-2026-66477 |
medium | 5.3 | 0.0029 | 2026-10-29 | Unauthenticated Broken Access Control in Gillion <= 4.13 versions. | |
CVE-2026-17572 |
medium | 5.5 | 0.0014 | 2026-10-29 | Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1 | |
CVE-2026-17573 |
medium | 4.0 | 0.0015 | 2026-10-29 | A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 | |
CVE-2026-17574 |
medium | 5.2 | 0.0015 | 2026-10-29 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file con | |
CVE-2026-42792 |
medium | 6.3 | 0.0043 | 2026-10-29 | Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows |